Engineering groups adopting the AI-Pushed Improvement Lifecycle (AI-DLC) with Amazon Bedrock AgentCore and coding brokers like Kiro typically battle with the hole between conceptual frameworks and dealing code. Amazon Bedrock AgentCore is a service for constructing, connecting, and optimizing brokers at scale with any framework or mannequin. AI-DLC positions AI as a central collaborator throughout the software program improvement lifecycle, dealing with routine execution whereas people retain oversight of essential selections. This submit closes that hole with working reference implementations.<\/p>\n
This submit walks by way of the structure, design selections, and key code patterns behind two reference implementations that show AI-DLC building section patterns utilizing Amazon Bedrock AgentCore, Kiro, and native agentic coding instruments. The primary generates Mermaid entity relationship diagrams from SQL schemas utilizing AgentCore runtime, a functionality of Amazon Bedrock AgentCore. The second supplies automated code safety evaluation by way of a multi-agent structure that makes use of AgentCore Gateway, a functionality of Amazon Bedrock AgentCore, and AgentCore reminiscence, a functionality of Amazon Bedrock AgentCore, together with exterior device integrations. Collectively, they illustrate the way to construction AI-driven workflows that keep human-in-the-loop governance whereas accelerating supply. Each implementations hyperlink to finish deployment directions of their respective GitHub repositories.<\/p>\n
AI-DLC building patterns in apply<\/h2>\n
The AI-DLC building section positions AI to suggest structure, generate implementation plans, produce code, and create deployment artifacts, with group members offering clarification on technical selections in actual time. The implementations described right here map on to this sample:<\/p>\n
Automated artifact technology: An agent receives structured enter (SQL schema information), creates an in depth plan, generates output (Mermaid ER diagrams), and shops outcomes for human overview.
\n Steady code high quality enforcement: A multi-agent system analyzes code pushed by way of steady integration and steady supply (CI\/CD) pipelines, producing safety assessments, Widespread Vulnerabilities and Exposures (CVE) checks, and coverage compliance studies that inform human decision-making.<\/p>\n
Each methods share a typical architectural basis constructed on AgentCore, demonstrating how groups can compose AI-driven workflows from modular, manageable parts.<\/p>\n
Resolution 1: SQL schema to ER diagram technology<\/h2>\n
This AWS Samples venture auto-generates Mermaid ER diagrams from SQL schema information utilizing an agentic AI workflow on Amazon Bedrock AgentCore. After SQL code is checked in by builders, the Amazon Easy Storage Service (Amazon S3) set off and AWS Lambda function-based workflow invokes the AgentCore runtime, which parses the info definition language (DDL) to supply an .mmd diagram saved again to Amazon S3. It reads solely schema metadata (tables, constraints, and overseas keys), by no means row information, making it a clear reference for schema-to-diagram automation.<\/p>\n
Enterprise problem<\/h3>\n
Database groups managing evolving SQL schemas want present entity relationship documentation. Guide creation of ER diagrams is time-intensive and documentation ceaselessly drifts from the precise schema. When schema modifications land by way of pull requests, groups want up to date diagrams with out including guide documentation steps to the event workflow.<\/p>\n
Structure<\/h3>\n
The system makes use of a serverless, event-driven structure with the next parts:<\/p>\n
![\"An](\"https:\/\/d2908q01vomqb2.cloudfront.net\/f1f836cb4ea6efb2a0b1b99f41ad8b103eff4b59\/2026\/08\/31\/ML-21366-1.png\")
<\/p>\nDetermine 1: Occasion-driven structure for SQL schema to ER diagram technology<\/p>\n<\/p><\/div>\n
S3 occasion set off: SQL information uploaded to an Amazon S3 bucket set off an AWS Lambda operate that initiates the evaluation workflow.
\n Authentication: Amazon Cognito supplies OAuth2 machine-to-machine (M2M) authentication. Shopper credentials are saved in AWS Programs Supervisor Parameter Retailer.
\n AgentCore runtime: A containerized agent constructed with the Strands framework runs on AgentCore runtime. The agent makes use of Claude Sonnet 4 by way of Amazon Bedrock to parse SQL DDL statements and generate Mermaid ER diagram syntax. (For mannequin availability by AWS Area, see Regional availability by fashions.)
\n AgentCore reminiscence: Gives persistent session context with a 90-day expiry, and helps semantic search throughout earlier analyses and incremental schema understanding.
\n Output storage: Generated .mmd diagram information are saved to Amazon S3 below a devoted prefix, with metadata monitoring the supply file and technology timestamp.<\/p>\n
The workflow proceeds as follows:<\/p>\n
A SQL file is uploaded to Amazon S3 (manually or by way of a CI\/CD pipeline).
\n The Lambda set off reads the file content material and authenticates by way of Cognito OAuth.
\n The set off invokes the AgentCore runtime agent with the SQL content material because the payload.
\n The agent analyzes the schema and identifies tables, columns, constraints, and overseas key relationships. It then generates an entire Mermaid erDiagram.
\n The diagram is saved to Amazon S3 and the evaluation session is saved in AgentCore reminiscence.<\/p>\n
Implementation particulars<\/h3>\n
The agent implementation makes use of the BedrockAgentCoreApp runtime wrapper with the @app.entrypoint decorator to register the handler:<\/p>\n
\nfrom bedrock_agentcore.reminiscence import MemoryClient
\nfrom strands import Agent
\nfrom strands.fashions import BedrockModel<\/p>\n
app = BedrockAgentCoreApp()
\nmannequin = BedrockModel(model_id=”us.anthropic.claude-sonnet-4-5-20250929-v1:0″, region_name=”us-west-2″)
\nerdiagram_agent = Agent(mannequin=mannequin)
\nmemory_client = MemoryClient(region_name=”us-west-2″)<\/p>\n
@app.entrypoint
\nasync def generate_er_diagram(payload: Dict[str, Any]) -> Dict[str, Any]:
\n sql_content = payload.get(“sql_content”, “”)
\n file_name = payload.get(“file_name”, “unknown_file.sql”)
\n # Generate diagram, retailer in reminiscence, save to S3
\n …\n <\/p><\/div>\n
Key design selections embrace:<\/p>\n
Chunked processing: Giant SQL information are break up into manageable segments, analyzed independently, then consolidated right into a unified diagram. This handles schemas with lots of of tables with out exceeding context limits.
\n Structured prompting: The agent makes use of a scientific evaluation immediate that extracts tables, columns, information varieties, main keys, and overseas key relationships earlier than producing diagram syntax.
\n OpenTelemetry tracing: Each step is instrumented with spans and attributes, offering observability into processing length, chunk counts, and error attribution.<\/p>\n
The entire implementation, together with OpenAI Codex abilities and MCP server integration, is obtainable within the sample-to-create-mermaid-entity-diagrams-from-sql-using-agentic-ai-on-agentcore repository.<\/p>\n
Resolution 2: Safe software program handoffs<\/h2>\n
This serverless code safety evaluation resolution makes use of Amazon Bedrock AgentCore to routinely scan Python or Java code for safety vulnerabilities, CVE dangers in dependencies, and coverage violations. The evaluation is triggered when code is pushed from a GitLab pipeline to Amazon S3. A Strands-based agent then evaluates the code utilizing Anthropic Claude Sonnet fashions on Amazon Bedrock. It calls Mannequin Context Protocol (MCP) instruments that run on AWS Lambda for CVE and coverage checks. (For mannequin availability by Area, see Regional availability by fashions.) Outcomes, together with high quality scores from 1 to 10 and suggestions, are saved in AgentCore reminiscence with semantic search and surfaced by way of a real-time, session-based internet dashboard. Amazon Cognito supplies authentication, and AgentCore Observability, a functionality of Amazon Bedrock AgentCore, and Amazon CloudWatch present monitoring.<\/p>\n
Enterprise problem<\/h3>\n
Code opinions for safety compliance require specialised data throughout CVE databases, organizational coding insurance policies, and language-specific safety patterns. Guide safety opinions create bottlenecks in supply pipelines, and inconsistent utility of requirements throughout groups results in variable code high quality.<\/p>\n
Structure<\/h3>\n
This resolution supplies automated code safety evaluation by way of a multi-agent structure for safe software program handoffs between improvement levels:<\/p>\n
![\"Uploaded](\"https:\/\/d2908q01vomqb2.cloudfront.net\/f1f836cb4ea6efb2a0b1b99f41ad8b103eff4b59\/2026\/08\/31\/ML-21366-2.png\")
<\/p>\nDetermine 2: Multi-agent structure for automated code safety evaluation<\/p>\n<\/p><\/div>\n
Code information are uploaded to an Amazon S3 bucket (manually or by way of a CI\/CD pipeline). An AWS Lambda set off detects new uploads and initiates the AgentCore evaluation workflow with OAuth2 authentication.
\n AgentCore Gateway with MCP instruments: The gateway orchestrates calls to exterior device integrations: <\/p>\n
Coverage Verify Lambda: Validates code towards organization-specific safety insurance policies.
\n CVE Database Verify Lambda: Scans dependency information for recognized vulnerabilities.<\/p>\n
AgentCore runtime (Strands framework): The core evaluation agent performs deep code overview, together with construction evaluation, logic high quality analysis, reminiscence and efficiency evaluation, safety subject detection, and finest practices compliance.
\n AgentCore reminiscence: Shops evaluation outcomes with semantic search capabilities, supporting historic comparability and development evaluation.
\n Dashboard Lambda: Serves an online UI that gives session-based outcomes with search and multi-tab navigation throughout information, violations, and high quality metrics.<\/p>\n
Key capabilities<\/h3>\n
The evaluation agent follows the identical AgentCore runtime sample as Resolution 1, with the addition of MCP device calls routed by way of AgentCore Gateway:<\/p>\n
\nfrom bedrock_agentcore.reminiscence import AgentCoreMemory
\nfrom strands import Agent
\nfrom strands.fashions import BedrockModel<\/p>\n
app = BedrockAgentCoreApp()
\nmannequin = BedrockModel(model_id=”us.anthropic.claude-sonnet-4-5-20250929-v1:0″, region_name=”us-west-2″)
\nanalysis_agent = Agent(mannequin=mannequin, instruments=[analyze_code, check_quality])
\nreminiscence = AgentCoreMemory(namespace=”code-analysis”)<\/p>\n
@app.entrypoint
\nasync def analyze_uploaded_code(payload: Dict[str, Any]) -> Dict[str, Any]:
\n file_content = payload.get(“file_content”, “”)
\n file_name = payload.get(“file_name”, “unknown.py”)
\n session_id = payload.get(“session_id”, “”)
\n # Analyze code, retailer leads to reminiscence, return high quality rating
\n …\n <\/p><\/div>\n
The agent receives code content material from the AWS Lambda set off, performs multi-dimensional evaluation utilizing the inspiration mannequin (FM), then invokes exterior instruments (coverage checker, CVE scanner) by way of AgentCore Gateway as wanted. Outcomes are endured to AgentCore reminiscence for dashboard retrieval and historic comparability.<\/p>\n
Key design selections embrace:<\/p>\n
Multi-agent separation: The code evaluation agent focuses solely on high quality evaluation. Coverage checking and CVE scanning are delegated to devoted AWS Lambda capabilities invoked by way of AgentCore Gateway, holding every element single-purpose and independently updatable.
\n Session-based outcome persistence: Every evaluation run creates a singular session in AgentCore reminiscence. The dashboard retrieves outcomes by session ID, permitting builders to match high quality scores throughout a number of code submissions.
\n Gateway-mediated device invocation: Exterior instruments are registered by way of AgentCore Gateway utilizing MCP relatively than direct invocation. This decouples the agent from device implementation particulars and permits new instruments to be added with out modifying agent code.<\/p>\n
The entire implementation is obtainable within the sample-agentic-secure-software-handoffs repository.<\/p>\n
Whereas AgentCore supplies the cloud runtime for deployed, event-driven agent workloads, the event workflow itself advantages from native agentic instruments that implement AI-DLC patterns on the developer\u2019s workstation.<\/p>\n
Kiro brokers and abilities<\/h3>\n
Kiro helps the AI-DLC inception and building phases by way of structured specs and customized agent abilities:<\/p>\n
Spec-driven improvement: Kiro transforms pure language necessities into structured specs with acceptance standards, then generates implementation plans from these specs. This maps on to the AI-DLC sample of AI creating plans and looking for human validation earlier than execution.
\n Customized abilities: Groups can outline reusable Kiro agent abilities that encode organizational requirements (coding patterns, safety necessities, architectural pointers), in order that AI-generated code constantly meets enterprise high quality bars.
\n Agentic activity execution: Kiro\u2019s agent mode handles multi-file implementation duties with autonomous device use (file creation, terminal instructions, search) whereas sustaining the human-in-the-loop overview at every specification checkpoint.<\/p>\n
OpenAI ChatGPT Codex (MCP server and abilities)<\/h3>\n
The repository additionally consists of an OpenAI Codex integration that demonstrates how the identical ER diagram technology workflow extends to extra coding brokers by way of MCP and customized abilities:<\/p>\n
MCP server for reside database schema entry: An area stdio-based MCP server connects Codex to MySQL or Amazon Aurora MySQL databases by way of INFORMATION_SCHEMA. The server exposes three instruments (schema_summary, generate_er_markdown, and generate_mermaid) that permit Codex to question desk buildings, columns, indexes, and overseas key relationships with out accessing desk row information.
\n Customized Codex ability: A SKILL.md file encodes the ER diagram technology workflow as a reusable Codex ability, guiding the agent by way of schema evaluation and diagram creation with constant high quality.
\n Safe credential administration: Database credentials are retrieved from AWS Secrets and techniques Supervisor with TLS verification enforced, following the identical safety patterns used within the AgentCore implementation.<\/p>\n
Claude Code (native agent)<\/h3>\n
Claude Code operates as an area command-line agent that enhances AgentCore deployments:<\/p>\n
Speedy prototyping: Earlier than deploying to AgentCore runtime, builders use Claude Code to iterate on agent logic, check prompts, and validate device integration patterns regionally.
\n Infrastructure-as-code technology: Claude Code generates deployment scripts, Dockerfiles, AWS Id and Entry Administration (IAM) insurance policies, and AWS CloudFormation templates. These artifacts comply with architectural specs produced throughout the AI-DLC building section.
\n Code overview and refactoring: Native brokers carry out first-pass opinions towards venture guidelines and customized directions, catching points earlier than code enters the CI\/CD pipeline the place the safe software program handoff system supplies the authoritative safety evaluation.<\/p>\n
The mixed workflow<\/h3>\n
A typical AI-DLC bolt (brief, intense work cycle) utilizing these instruments follows this sample:<\/p>\n
Inception (Kiro): Remodel enterprise necessities into specs with acceptance standards. The group validates AI-generated specs in a mob elaboration session.
\n Building (Claude Code and Kiro): Generate implementation code, deployment scripts, and check suites. Native brokers deal with file technology and iterative refinement whereas Kiro manages activity orchestration.
\n Validation (AgentCore): Code pushed by way of CI\/CD triggers automated safety evaluation. The multi-agent system supplies a top quality evaluation earlier than merge.
\n Operations (AgentCore): Manufacturing brokers (just like the ER diagram generator) run repeatedly on AgentCore runtime, triggered by occasions, processing workloads at scale with full observability.<\/p>\n
Finest practices<\/h2>\n
Primarily based on implementing these methods, we advocate the next practices:<\/p>\n
Separate agent issues: Design every agent with a single, well-defined duty. The ER diagram agent solely generates ER diagrams. Composability comes from orchestration, not from overloading particular person brokers.
\n Use AgentCore reminiscence for context continuity: Persistent reminiscence permits brokers to be taught from earlier interactions, examine present evaluation with historic baselines, and keep state throughout periods with out reprocessing.
\n Instrument with OpenTelemetry from day one: Tracing supplies visibility into agent habits, processing length, and failure modes. That is important for debugging immediate effectiveness and figuring out efficiency bottlenecks.
\n Retailer configuration in Parameter Retailer: Decouple configuration from code. Cognito credentials, reminiscence IDs, mannequin alternatives, and bucket names ought to all be retrievable at runtime.
\n Implement chunked processing for big inputs: Design brokers to deal with inputs that exceed mannequin context home windows by splitting, analyzing independently, and consolidating outcomes.
\n Safe with Cognito M2M authentication: Use OAuth2 shopper credentials stream for service-to-service communication. Keep away from hardcoded credentials or long-lived tokens.
\n Combine by way of CI\/CD, not guide add: In manufacturing, join brokers to repository occasions (merge requests, pipeline levels) relatively than requiring guide file uploads. The S3 set off sample proven right here interprets on to GitLab webhook or GitHub Actions integration.
\n Apply Amazon Bedrock Guardrails for manufacturing agent outputs: Configure content material filtering insurance policies, denied subject detection, and grounding validation to ensure agent-generated responses meet accountable AI requirements. For code evaluation brokers, guardrails can block outputs containing insecure code patterns or hallucinated CVE references. For diagram technology brokers, grounding checks validate that outputs precisely replicate the supply schema. Mix guardrails with automated analysis pipelines to repeatedly monitor agent habits and flag drift from anticipated output high quality.<\/p>\n
Conclusion<\/h2>\n
The AI-DLC methodology turns into sensible when backed by concrete implementation patterns. Amazon Bedrock AgentCore supplies the runtime infrastructure (containerized brokers, persistent reminiscence, safe gateways, and exterior device integration) whereas native instruments like Kiro and Claude Code speed up the event workflow itself.<\/p>\n
Begin with the SQL-to-ER-Diagram pattern to deploy your first AgentCore agent. Observe the deployment scripts in sequence, then prolong the sample with multi-agent coordination, MCP device integrations, and CI\/CD-driven triggers utilizing the Safe software program handoffs pattern.<\/p>\n
To go deeper, see Transfer your AI brokers from proof of idea to manufacturing with Amazon Bedrock AgentCore for a complementary walkthrough of taking brokers to manufacturing scale. For full-service particulars, API references, and configuration steerage, discuss with the Amazon Bedrock AgentCore documentation.<\/p>\n
![\"Arghya](\"https:\/\/d2908q01vomqb2.cloudfront.net\/f1f836cb4ea6efb2a0b1b99f41ad8b103eff4b59\/2026\/08\/31\/ML-21366-3.jpeg\")
<\/p>\n<\/p><\/div>\n![\"Ram](\"https:\/\/d2908q01vomqb2.cloudfront.net\/f1f836cb4ea6efb2a0b1b99f41ad8b103eff4b59\/2026\/08\/31\/ML-21366-4.png\")
<\/p>\n<\/p><\/div>\n![\"Kunal](\"https:\/\/d2908q01vomqb2.cloudfront.net\/f1f836cb4ea6efb2a0b1b99f41ad8b103eff4b59\/2026\/08\/31\/ML-21366-5.jpeg\")
<\/p>\n<\/p><\/div>\n![\"Ananth](\"https:\/\/d2908q01vomqb2.cloudfront.net\/f1f836cb4ea6efb2a0b1b99f41ad8b103eff4b59\/2026\/08\/31\/ML-21366-6.jpg\")
<\/p>\n<\/p><\/div>\n